38%
Total Score
unhealthy
Risky: a single release from 2017 has had no subsequent maintenance activity.
This is the package's only release, published about 9 years ago, with no releases in the last 12 months. That strongly indicates abandonment risk.
The repository recorded no commits and no active maintainers during the last 3 months, consistent with the long release gap and leaving compatibility issues unlikely to be addressed.
The manifest declares a proprietary license, and no license file was detected in either the package or repository. This creates a material adoption and redistribution constraint for an open-source dependency.
The repository name does not match the package name and its README does not mention this package, so the source relationship is not clearly established even though a linked repository exists.
The repository uses Composer but has no security-scanning tools. For a small package this is not decisive, but it reduces evidence of ongoing dependency and supply-chain hygiene.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.